Re: [Bug-ddrescue] corrupt ntfs partition - what is the proper thing to do

[andrew zajac]

--- On Thu, 6/19/08, tax <address@hidden> wrote:

Hi Guys,

I seem to have a problem with an NTFS (windows XP) disk with a volume that
has gone corrupt.

I have used ddrescue to read the entire /dev/sda1  partition into an file
and I have tried to mount and repair it from linux using ntfs and ntfs-3g. 

This is my console with my attempts on the file image:

mount -o loop /root/dw/eastside_wip /root/dw/disks/eastside/
mount: wrong fs type, bad option, bad superblock on /dev/loop0,
       missing codepage or helper program, or other error
       In some cases useful info is found in syslog - try
       dmesg | tail  or so

mount -o loop -t ntfs-3g /root/dw/eastside_wip
 /root/dw/disks/eastside/
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory
Failed to mount '/dev/loop0': No such file or directory


ntfsfix eastside_wip
Mounting volume... Failed to open ntfs attribute: No such file or directory.
ntfs_mft_load(): Failed.
Failed to load $MFT: No such file or directory.
Failed to startup volume: No such file or directory.
FAILED
Attempting to correct errors... Failed to open ntfs attribute: No such file
or d                                        irectory.
ntfs_mft_load(): Failed.
Failed to load $MFT: No such file or directory.
FAILED
Failed to startup volume: No such file or directory.
Volume is corrupt. You should run chkdsk.

What, do you think, would be the obvious next step? 

All suggestions are welcome. And thanx in advance

Have you tried tesdisk?

Quote:/usr/share/doc/testdisk/html/advanced_ntfs_boot_and_mft_repair.html

If the NTFS boot sector is damaged, data can not be accessed. Windows will prompt The drive is not formatted, do you want to format it now? Linux mount will display wrong fs type, bad option, bad superblock

TestDisk let you manipulate and fix the boot sector of NTFS partitions. Select the partition you want to modify and choose Boot.

Recovering NTFS Boot Sector on NTFS Partitions using its backup

TestDisk can use backup boot sector to fix corrupted NTFS boot sector. The primary boot sector is sector zero of the filesystem, the backup NTFS boot sector is located near the end of the filesystem. TestDisk checks the boot sector and the backup boot sector. If the boot sector and backup boot sector mismatches, you can overwrite the NTFS boot sector with the backup boot sector (Backup BS) or vice versa (Org. BS). Dump can used to display the boot sector content in both hexadecimal and ascii.

Rebuilding NTFS Boot Sector on NTFS Partitions

If both NTFS boot sector are corrupted, you need to rebuild NTFS boot sector, TestDisk searches the MFT (Master File Table: $MFT) and its backup ($MFTMirr). It reads the mft record size and it computes the cluster size, It reads the Size of Index Allocation Entry in the root directory index. Using all these values, TestDisk can provide a new boot sector. Finaly it lets the user list the files before writing.

Repair NTFS MFT

The MFT (Master File Table) is sometimes corrupted. If Microsoft Check Disk (chkdsk) failed to repair the MFT, run TestDisk and in the Advanced menu, select your NTFS partition and choose Repair MFT. TestDisk will try to repair the MFT using MFT mirror, its backup.

Content is available under GNU Free Documentation License 1.2.
by Christophe GRENIER

---

Now with a new friend-happy design! Try the new Yahoo! Canada Messenger